Hello all, I've been on this for a few days and have run out of ideas. I'm trying to implement a fairly simple traffic shaping scheme on a
2811 running 12.4 which has a 9port Fast HWIC installed. I have a couple of vlans that are connected to the switch module that needs specific traffic shaping (both inbound and outbound). I use one of the two ethernet port on the router for the uplink to the internet. I've manage to get inbound (internet to vlans) shaping to work as needed but no shaping occurs on the outbound traffic (vlans to internet). here is the relevant config :class-map match-any vlan100map_IO match access-group 100 match access-group 110 ! class-map match-any vlan101map_IO match access-group 101 match access-group 111 ! ! policy-map 100 class vlan100map_IO shape average 2100000 ! policy-map vlan101 class vlan101map_IO shape average 1050000 ! policy-map outbound class 100map_IO shape average 2100000 class 101map_IO shape average 1050000 ! ! interface FastEthernet0/0 ip address xxx.xxx.xxx.xxx 255.255.255.224 service-policy output outbound ! interface FastEthernet0/3/0 switchport access vlan 100 ! interface FastEthernet0/3/1 switchport access vlan 101 ! interface Vlan100 ip address 10.0.0.32 255.255.255.252 service-policy output vlan100 ! interface Vlan101 ip address 10.0.0.37 255.255.255.252 service-policy output vlan101 ! ! access-list 100 permit ip any 10.0.0.32 0.0.0.3 access-list 101 permit ip any 10.0.0.36 0.0.0.3 access-list 110 permit ip 10.0.0.32 0.0.0.3 any access-list 111 permit ip 10.0.0.36 0.0.0.3 any
A couple of points regarding this config :
-You can't assign the service-policy to one of the switch interface, probably because they are considered only Layer2 and that policing is done on a routed interface.
-I've tried using the other (unused in this config) Ethernet port on the router (not one of the switched ones) and configured it as if it was one of the switched port, shaping wise. And the shaping works flawlessly.
-When I generate traffic for a VLAN and do a "show policy-map interface vlan 101", I can see the relevant match rule getting traffic, but I never get the "shaping active" to yes (as it normally happens on the outbound interface)
Class-map: vlan101map_IO (match-any) 38369 packets, 54319444 bytes 5 minute offered rate 1455000 bps, drop rate 0 bps Match: access-group 101 38360 packets, 54318733 bytes 5 minute rate 1455000 bps Match: access-group 111 0 packets, 0 bytes 5 minute rate 0 bps Traffic Shaping Target/Average Byte Sustain Excess Interval Increment Rate Limit bits/int bits/int (ms) (bytes) 1050000/1050000 6300 25200 25200 24 3150
Adapt Queue Packets Bytes Packets Bytes Shaping Active Depth Delayed Delayed Active - 0 9 711 0 0 no
All this points me to think that only the two routed ethernet on the router have buffers/queues capable of handling the shaping. Any ideas would be greatly appreciated.
P.S. IP addresses have been changed to protect the innocent :) Murphy.